CVE-2026-88941

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-88941", "assignerOrgId": "e45d732a-8f6b-4b6b-be76-7420f6a2b988", "state": "PUBLISHED", "assignerShortName": "Kaspersky", "dateReserved": "2026-09-10T14:58:04.793Z", "datePublished": "2026-10-29T09:11:33.069Z", "dateUpdated": "2026-10-29T16:54:19.568Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "e45d732a-8f6b-4b6b-be76-7420f6a2b988", "shortName": "Kaspersky", "dateUpdated": "2026-10-29T16:54:19.568Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-306", "description": "CWE-306: Missing Authentication for Critical Function", "type": "CWE"}]}], "affected": [{"vendor": "Kaspersky", "product": "Network Agent", "platforms": ["Windows"], "versions": [{"version": "16.3.0.1207", "status": "affected"}, {"version": "16.2.0.1477", "status": "affected"}, {"version": "16.2.0.1023", "status": "affected"}, {"version": "16.2.0.917", "status": "affected"}, {"version": "16.1.0.6517", "status": "affected"}, {"version": "16.0.0.254", "status": "affected"}, {"version": "15.4.0.8952", "status": "affected"}, {"version": "15.3.0.392", "status": "affected"}, {"version": "15.2.0.442", "status": "affected"}, {"version": "15.1.0.20748", "status": "affected"}, {"version": "15.1.0.11795", "status": "affected"}, {"version": "14.0.0.20023", "status": "affected"}, {"version": "10.5.1781", "status": "affected"}], "defaultStatus": "unaffected"}, {"vendor": "Kaspersky", "product": "Administration Server", "platforms": ["Windows"], "versions": [{"version": "15.1.0.22239", "status": "affected"}, {"version": "15.1.0.20748", "status": "affected"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network Agent module of Kaspersky Security Center to malfunction. There are no evidence of the vulnerability exploitation in-the-wild."}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"baseScore": 6.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:H/SA:H", "version": "4.0"}, "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "LOW", "baseScore": 5.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L"}}], "solutions": [{"lang": "en", "value": "Users of Kaspersky Security Center for Linux should install the Network Agent for Windows module, version 17.0.0.3992, from the Kaspersky Security Center 17 distribution package."}, {"lang": "en", "value": "Users of Kaspersky Security Center for Windows should install the Administration Server module (version 15.1.0.28509) from the Kaspersky Security Center 15.1 Update 3 for Windows distribution package, and then install the Network Agent for Windows module (version 17.0.0.3992)."}, {"lang": "en", "value": "Users running Network Agent on Windows XP should install the updated Network Agent for Windows XP SP3 module version 14.0.0.20145 or the Network Agent for Windows XP SP2 module version 10.5.0.1781 (the build number has not changed)."}, {"lang": "en", "value": "Users of Kaspersky Next Expert View (Kaspersky Next) should install the updated Network Agent for Windows module version 16.2.0.1547 from the list of current versions of Kaspersky applications."}, {"lang": "en", "value": "Users of Kaspersky Next Expert View (Kaspersky Next) who use Network Agent on Windows XP should install the updated Network Agent for Windows XP SP3 module version 14.0.0.20145 from the list of current versions of Kaspersky applications."}, {"lang": "en", "value": "Users of Kaspersky Endpoint Security for Virtualization 5.2 Light Agent should install the updated Administration Server for Windows and Network Agent for Windows modules."}, {"lang": "en", "value": "Users of Kaspersky Endpoint Security Cloud (also referred to as Kaspersky Next Pro View) should install the Network Agent for Windows module version 15.1.0.22268."}, {"lang": "en", "value": "Users of Kaspersky Vulnerability Management should update the solution to version 1.1."}], "timeline": [{"time": "2026-10-28T00:00:00.000Z", "lang": "en", "value": "Advisory published by Kaspersky"}], "credits": [{"lang": "en", "value": "Nguyen Duc Anh of Noventiq", "type": "finder"}], "references": [{"url": "https://support.kaspersky.com/vulnerability/list-of-advisories/12430#291026", "name": "Advisory issued on October 29, 2026", "tags": ["vendor-advisory"]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-88941", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-29T12:23:11.998474Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-29T12:36:54.040Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-88941", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-29T12:23:11.998474Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-29T12:30:34.220Z"}}], "cna": {"credits": [{"lang": "en", "type": "finder", "value": "Nguyen Duc Anh of Noventiq"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.2, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "cvssV4_0": {"version": "4.0", "baseScore": 6.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:H/SA:H"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Kaspersky", "product": "Network Agent", "versions": [{"status": "affected", "version": "16.3.0.1207"}, {"status": "affected", "version": "16.2.0.1477"}, {"status": "affected", "version": "16.2.0.1023"}, {"status": "affected", "version": "16.2.0.917"}, {"status": "affected", "version": "16.1.0.6517"}, {"status": "affected", "version": "16.0.0.254"}, {"status": "affected", "version": "15.4.0.8952"}, {"status": "affected", "version": "15.3.0.392"}, {"status": "affected", "version": "15.2.0.442"}, {"status": "affected", "version": "15.1.0.20748"}, {"status": "affected", "version": "15.1.0.11795"}, {"status": "affected", "version": "14.0.0.20023"}, {"status": "affected", "version": "10.5.1781"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}, {"vendor": "Kaspersky", "product": "Administration Server", "versions": [{"status": "affected", "version": "15.1.0.22239"}, {"status": "affected", "version": "15.1.0.20748"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2026-10-28T00:00:00.000Z", "value": "Advisory published by Kaspersky"}], "solutions": [{"lang": "en", "value": "Users of Kaspersky Security Center for Linux should install the Network Agent for Windows module, version 17.0.0.3992, from the Kaspersky Security Center 17 distribution package."}, {"lang": "en", "value": "Users of Kaspersky Security Center for Windows should install the Administration Server module (version 15.1.0.28509) from the Kaspersky Security Center 15.1 Update 3 for Windows distribution package, and then install the Network Agent for Windows module (version 17.0.0.3992)."}, {"lang": "en", "value": "Users running Network Agent on Windows XP should install the updated Network Agent for Windows XP SP3 module version 14.0.0.20145 or the Network Agent for Windows XP SP2 module version 10.5.0.1781 (the build number has not changed)."}, {"lang": "en", "value": "Users of Kaspersky Next Expert View (Kaspersky Next) should install the updated Network Agent for Windows module version 16.2.0.1547 from the list of current versions of Kaspersky applications."}, {"lang": "en", "value": "Users of Kaspersky Next Expert View (Kaspersky Next) who use Network Agent on Windows XP should install the updated Network Agent for Windows XP SP3 module version 14.0.0.20145 from the list of current versions of Kaspersky applications."}, {"lang": "en", "value": "Users of Kaspersky Endpoint Security for Virtualization 5.2 Light Agent should install the updated Administration Server for Windows and Network Agent for Windows modules."}, {"lang": "en", "value": "Users of Kaspersky Endpoint Security Cloud (also referred to as Kaspersky Next Pro View) should install the Network Agent for Windows module version 15.1.0.22268."}, {"lang": "en", "value": "Users of Kaspersky Vulnerability Management should update the solution to version 1.1."}], "references": [{"url": "https://support.kaspersky.com/vulnerability/list-of-advisories/12430#291026", "name": "Advisory issued on October 29, 2026", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en", "value": "Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network Agent module of Kaspersky Security Center to malfunction. There are no evidence of the vulnerability exploitation in-the-wild."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-306", "description": "CWE-306: Missing Authentication for Critical Function"}]}], "providerMetadata": {"orgId": "e45d732a-8f6b-4b6b-be76-7420f6a2b988", "shortName": "Kaspersky", "dateUpdated": "2026-10-29T16:54:19.568Z"}}}, "cveMetadata": {"cveId": "CVE-2026-88941", "state": "PUBLISHED", "dateUpdated": "2026-10-29T16:54:19.568Z", "dateReserved": "2026-09-10T14:58:04.793Z", "assignerOrgId": "e45d732a-8f6b-4b6b-be76-7420f6a2b988", "datePublished": "2026-10-29T09:11:33.069Z", "assignerShortName": "Kaspersky"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["Windows"], "product": "Network Agent", "vendor": "Kaspersky", "versions": [{"status": "affected", "version": "16.3.0.1207"}, {"status": "affected", "version": "16.2.0.1477"}, {"status": "affected", "version": "16.2.0.1023"}, {"status": "affected", "version": "16.2.0.917"}, {"status": "affected", "version": "16.1.0.6517"}, {"status": "affected", "version": "16.0.0.254"}, {"status": "affected", "version": "15.4.0.8952"}, {"status": "affected", "version": "15.3.0.392"}, {"status": "affected", "version": "15.2.0.442"}, {"status": "affected", "version": "15.1.0.20748"}, {"status": "affected", "version": "15.1.0.11795"}, {"status": "affected", "version": "14.0.0.20023"}, {"status": "affected", "version": "10.5.1781"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows"], "product": "Administration Server", "vendor": "Kaspersky", "versions": [{"status": "affected", "version": "15.1.0.22239"}, {"status": "affected", "version": "15.1.0.20748"}]}], "source": "vulnerability@kaspersky.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network Agent module of Kaspersky Security Center to malfunction. There are no evidence of the vulnerability exploitation in-the-wild."}], "id": "CVE-2026-88941", "lastModified": "2026-10-29T16:19:37.750", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 5.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 2.0, "impactScore": 2.7, "source": "vulnerability@kaspersky.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "HIGH", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "vulnerability@kaspersky.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-88941", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-29T12:23:11.998474Z", "version": "2.0.3"}}]}, "published": "2026-10-29T10:17:06.520", "references": [{"source": "vulnerability@kaspersky.com", "url": "https://support.kaspersky.com/vulnerability/list-of-advisories/12430#291026"}], "sourceIdentifier": "vulnerability@kaspersky.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-306"}], "source": "vulnerability@kaspersky.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["Windows"], "status": "affected", "versions": {"scheme": "generic", "value": "15.1.0.22239"}}, {"platform": ["Windows"], "status": "affected", "versions": {"scheme": "generic", "value": "15.1.0.20748"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "product": "administration_server", "vendor": "kaspersky"}, {"configurations": [{"platform": ["windows"], "status": "affected", "versions": {"scheme": "generic", "value": "16.3.0.1207"}}, {"platform": ["windows"], "status": "affected", "versions": {"scheme": "generic", "value": "16.2.0.1477"}}, {"platform": ["windows"], "status": "affected", "versions": {"scheme": "generic", "value": "16.2.0.1023"}}, {"platform": ["windows"], "status": "affected", "versions": {"scheme": "generic", "value": "16.2.0.917"}}, {"platform": ["windows"], "status": "affected", "versions": {"scheme": "generic", "value": "16.1.0.6517"}}, {"platform": ["windows"], "status": "affected", "versions": {"scheme": "generic", "value": "16.0.0.254"}}, {"platform": ["windows"], "status": "affected", "versions": {"scheme": "generic", "value": "15.4.0.8952"}}, {"platform": ["windows"], "status": "affected", "versions": {"scheme": "generic", "value": "15.3.0.392"}}, {"platform": ["windows"], "status": "affected", "versions": {"scheme": "generic", "value": "15.2.0.442"}}, {"platform": ["windows"], "status": "affected", "versions": {"scheme": "generic", "value": "15.1.0.20748"}}, {"platform": ["windows"], "status": "affected", "versions": {"scheme": "generic", "value": "15.1.0.11795"}}, {"platform": ["windows"], "status": "affected", "versions": {"scheme": "generic", "value": "14.0.0.20023"}}, {"platform": ["windows"], "status": "affected", "versions": {"scheme": "semver", "value": "10.5.1781"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Network Agent", "source": "cna", "vendor": "Kaspersky"}, "product": "network_agent", "vendor": "kaspersky"}], "created": "2026-10-29T11:00:16.547914+00:00", "title": "Network Agent Windows Module Vulnerability Causing Malfunction", "updated": "2026-10-30T23:15:50.242439+00:00", "vendors": ["kaspersky", "kaspersky$PRODUCT$administration_server", "kaspersky$PRODUCT$network_agent"]}